This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          Df+WCd08t/tUAfRo6hDQflCtGegpgDaGud2sNa9B1Yk=
Subject key identifier:   0D:14:1E:96:0E:F3:3D:60:0D:48:B4:2E:6C:DC:51:DB:32:EB:F4:51
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          6A
Signing time:             Fri 19 Dec 2025 05:59:12 +0000
Manifest this update:     Fri 19 Dec 2025 05:59:12 +0000
Manifest next update:     Fri 26 Dec 2025 05:59:12 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: fsDj8tbAG1mpbunpxfFDPy8pyJGgA6w/oCDruFtkcJI=)
                          2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=)
                          3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Dec 19 05:59:12 2025 GMT
            Not After : Dec 26 05:59:12 2025 GMT
        Subject: CN=6944e9b0-b6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:d7:1c:12:ec:a6:f0:54:5d:1d:a4:33:28:
                    68:55:d4:98:89:a5:5f:89:81:7c:e6:56:bf:89:5a:
                    a8:79:16:42:5f:63:75:2b:55:b5:e2:10:c0:73:01:
                    1c:39:50:9b:08:8d:fc:e2:29:75:f5:76:9b:5f:d8:
                    49:e9:45:ae:9d:ee:29:d0:da:44:a7:e7:1b:05:33:
                    07:e1:c0:e0:61:34:53:30:de:21:21:e3:43:d5:b5:
                    24:bf:a8:01:a3:98:35:21:b1:01:c6:1a:6e:b4:2f:
                    0f:ef:fe:72:8b:0c:2b:aa:db:cf:5f:d8:05:d7:4f:
                    f1:0d:7e:2d:04:8d:da:8d:84:26:10:c5:56:86:61:
                    97:3a:7b:31:48:ca:ac:8f:61:3c:be:2e:ad:9a:80:
                    60:3e:fa:1c:ac:7e:30:47:d2:5e:aa:02:04:24:36:
                    bb:63:8f:67:56:35:f0:4c:42:72:13:f5:e2:40:33:
                    5f:5b:03:9e:5a:1d:a6:0b:d7:d4:32:c8:06:7f:15:
                    03:94:ce:71:06:3e:45:cb:1d:63:31:fe:f0:e3:4f:
                    2b:11:05:37:5c:6b:b8:c0:b1:15:ed:80:ad:50:ed:
                    0f:ef:a5:67:1c:94:fb:77:c6:71:96:88:13:fc:ac:
                    92:3c:ce:c5:5a:9d:78:ac:4e:f5:e9:10:e5:ae:22:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:1E:96:0E:F3:3D:60:0D:48:B4:2E:6C:DC:51:DB:32:EB:F4:51
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b4:ec:de:9a:0b:98:1a:2a:88:35:93:0f:1f:4c:62:5c:76:
         55:66:05:23:9b:b3:d5:53:ce:ba:69:b2:65:ea:ec:a9:10:c3:
         03:c7:77:bf:6a:72:72:13:6c:2d:3e:d2:99:04:a5:b3:a7:aa:
         0d:8e:85:ad:c2:ba:a6:03:03:0a:d0:d9:90:c5:38:5b:47:59:
         91:f5:a5:c1:f8:fc:2f:76:e7:24:5a:d3:f6:b1:88:8d:a6:dd:
         80:5b:b5:7b:48:ff:28:f0:44:96:c1:17:52:1f:90:f6:3b:85:
         4f:bc:4e:50:bf:ed:67:20:5b:a1:01:c9:a8:ac:f7:7e:8a:80:
         44:b8:84:37:cb:93:b4:3c:c5:7d:6b:18:2e:ec:9b:6f:21:13:
         f0:7b:93:e7:3c:ec:2f:26:c2:90:ee:0a:9c:ab:1f:d8:81:f1:
         fd:99:de:69:b4:e0:8c:a8:79:29:ae:17:be:66:10:ac:17:60:
         46:ed:40:34:d9:e3:00:88:4b:92:1d:00:ad:40:40:11:30:44:
         9e:f0:4f:d4:37:3a:67:2e:d9:2a:9b:3a:5a:7f:c5:d9:cf:5d:
         64:2f:c4:4d:3f:04:eb:eb:0b:74:38:f2:e4:e6:fe:58:95:10:
         04:06:1e:56:d2:98:43:db:90:2a:10:f1:8d:ea:dc:98:a4:24:
         9c:9c:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:44:42 2025 by rpki-client